Privacy Policy

Your privacy matters. This policy explains how we collect, use, and protect your personal data.

Last Updated:

1. Who We Are (Agency)

Under the Privacy Act 2020, we are the agency responsible for your personal information:

  • Name: Lovelyantivita
  • Address: State Highway 73, Arthur's Pass Village 7875, New Zealand
  • Phone: +64 3 377 7788
  • Email: reach@lovelyantivita.world
  • Website: https://lovelyantivita.world

2. Applicable Privacy Law

We are based in New Zealand. This Privacy Policy is designed to comply with the Privacy Act 2020 and the Information Privacy Principles (IPPs). Where visitors access the Website from other regions (including the European Economic Area), additional rights may apply as described in this policy.

3. Data We Collect

We may collect the following types of personal data when you interact with our website:

  • Contact Information: Name, email address, and message content submitted through our contact form.
  • Usage Data: Information about how you access and use our website, including IP address, browser type, operating system, referring URLs, pages visited, and timestamps.
  • Cookie Data: Data collected through cookies and similar tracking technologies. See our Cookie Policy for full details.

We do not collect any special categories of personal data (such as data revealing racial or ethnic origin, political opinions, religious beliefs, or biometric data).

4. How We Collect Personal Information

We collect personal information directly from you when you use our contact form, manage cookie preferences, or otherwise interact with the Website. Where practicable, we collect information directly from the individual concerned, as required by the Privacy Act 2020.

We may also collect limited technical information automatically when you visit the Website (for example, IP address and browser type) through cookies or similar technologies, only where permitted by your cookie choices and this policy.

5. Legal Basis and Purpose Limitation

Under the Privacy Act 2020 (New Zealand), we may only collect personal information where it is necessary for a lawful purpose connected with our functions or activities. We collect and use personal information to:

  • respond to enquiries and communicate with you;
  • operate, maintain, and improve the Website;
  • understand how the Website is used (with your consent for non-essential analytics cookies);
  • protect the security and integrity of the Website; and
  • meet legal and regulatory obligations.

We will not use personal information for a purpose other than the purpose for which it was collected, unless an exception under the Privacy Act applies (for example, with your authorisation or where the new use is directly related to the original purpose).

If you are located in the European Economic Area (EEA), we also process personal data under the General Data Protection Regulation (GDPR) on the bases of consent, legitimate interests (where balanced against your rights), and legal obligation, as described in Section 12 below.

6. Data Sharing

We do not sell, rent, or trade your personal data to third parties. We may share data with:

  • Service Providers: Trusted third parties who assist in operating our website (e.g., hosting providers, analytics services). These providers are contractually obligated to protect your data.
  • Legal Authorities: When required by law, court order, or governmental regulation.

7. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes described in this policy:

  • Contact form submissions: Retained for up to 12 months after the inquiry is resolved.
  • Analytics data: Retained for up to 26 months.
  • Cookie consent records: Retained for up to 12 months.

After the retention period expires, data is securely deleted or anonymized.

8. Your Rights Under the Privacy Act 2020 (New Zealand)

If you are in New Zealand, you have rights under the Privacy Act 2020, including rights aligned with the Information Privacy Principles (IPPs). In summary, you may:

  • Request access to personal information we hold about you (subject to applicable exceptions).
  • Request correction of personal information that you believe is inaccurate, out of date, incomplete, irrelevant, or misleading.
  • Withdraw consent where processing is based on your consent (for example, optional cookies or contact form submission), without affecting the lawfulness of processing before withdrawal.
  • Complain to us if you believe we have interfered with your privacy, and escalate to the Office of the Privacy Commissioner if you are not satisfied with our response.

To exercise these rights, contact us using the details in Section 15. We will respond within a reasonable time and, where required, no later than 20 working days for access requests under the Privacy Act (unless an extension applies and we notify you).

9. Privacy Breaches

We take reasonable steps to protect personal information. If a privacy breach occurs that is likely to cause serious harm, we will assess the breach and, where required under the Privacy Act 2020, notify the Office of the Privacy Commissioner and affected individuals without undue delay.

10. Data Security

We implement appropriate technical and organizational measures to protect your personal data, including:

  • Encryption of data in transit using TLS/SSL protocols.
  • Secure storage of personal data with access controls.
  • Regular security assessments and updates.
  • Limited access to personal data on a need-to-know basis.

While we strive to protect your data, no method of electronic transmission or storage is entirely secure. We encourage you to use caution when sharing personal information online.

11. Disclosure to Overseas Recipients

Some service providers (for example, hosting or analytics providers) may store or process personal information outside New Zealand. Before disclosing personal information overseas, we take reasonable steps to ensure that the recipient is subject to privacy safeguards comparable to those under the Privacy Act 2020, or we rely on an applicable exception under IPP 12. You may contact us for more information about overseas recipients relevant to your data.

12. Additional Rights for EEA Residents (GDPR)

If you are located in the European Economic Area, you may also have the following rights under the GDPR: access, rectification, erasure, restriction of processing, data portability, objection to processing based on legitimate interests, and withdrawal of consent. To exercise these rights, contact us using the details in Section 15. We will respond within 30 days where the GDPR applies.

You may lodge a complaint with your local data protection supervisory authority in the EEA.

13. Children's Privacy

Our Website is not directed at children under 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us so we can delete it promptly.

14. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. Changes will be posted on this page with a revised "Last Updated" date. Material changes may also be highlighted on the Website where appropriate.

15. Contact Us and Complaints

If you have questions about this Privacy Policy, wish to exercise your rights, or believe we have breached the Privacy Act 2020, please contact us:

  • Address: State Highway 73, Arthur's Pass Village 7875, New Zealand
  • Phone: +64 3 377 7788
  • Email: reach@lovelyantivita.world

If you are not satisfied with our response, you may contact the Office of the Privacy Commissioner (New Zealand):